Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone
Organizations often defer patching because of business disruption fears — but that didnt work out very well for Rackspaces Hosted Exchange service.
Copyright Infringement Lure Used for Facebook Credential Harvesting
Business users receive a message from Facebook warning their accounts will be permanently suspended for using photos illegally if they dont appeal within 24 hours, leading victims to a credential-harvesting page instead.
JsonWebToken Security Bug Opens Servers to RCE
The JsonWebToken package plays a big role in the authentication and authorization functionality for many applications.
RussiaLinked Turla APT Sneakily CoOpts Ancient Andromeda USB Infections
Using command-and-control servers from the decade-old Andromeda malware, the group is installing reconnaissance tools and a backdoor on previously infected systems to target Ukrainian victims.
Vice Society Releases Info Stolen From 14 UK Schools Including Passport Scans
In whats become a pattern, the cybercriminal ring stole data, demanded payment, and posted personal information when ransom was denied.
PurpleUrchin Gang Embraces DevOps In Massive Cloud Malware Campaign
The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.
From Ferrari to Ford Cybersecurity Bugs Plague Automotive Safety
Security vulnerabilities plague automakers, and as vehicles become more connected, a more proactive stance on cybersecurity will be required — alongside regulations.
ChatGPT Artificial Intelligence An Upcoming Cybersecurity Threat
The role of artificial intelligence in cybersecurity is growing. A new AI model highlights the opportunities and challenges.
Dont Be Blindsided by Software Bills of Materials
Its imperative we collaborate and partner to improve software security. This may require developing tools and standards that can enrich SBOMs and provide deeper analysis.
CircleCI Rotate Stored Secrets ASAP
DevOps platform warns customers of a security incident under investigation.